Associating a device with another device's network subscription

• US 9,998,917 B2
• Filed: 01/27/2015
• Issued: 06/12/2018
• Est. Priority Date: 07/16/2014
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Lee, Soo Bum, Horn, Gavin Bernard, Palanigounder, Anand
• Primary Examiner(s): SHEDRICK, CHARLES TERRELL
• Application Number:
  US14/606,736
• Publication Number:
  US 20160021691A1
• Time in Patent Office: 1,232 Days
• Field of Search: 4554351
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/43 using shared identity modules, e.g. SIM sharing
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 12/76 Group identity
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 48/02 Access restriction performed under specific conditions
• CPC Class Codes: H04W 60/00 Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 8/04 Registration at HLR or HSS [Home Subscriber Server]
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

Methods, systems, and devices for wireless communication at a network entity are described. A user equipment (UE) may obtain identification information for a device and may assist in establishing credentials by which the device accesses a wireless network, e.g., a cellular network. The UE may establish a connection with the wireless network using its own credentials. A device subscription administration server, which may be an entity within the wireless network core, may authenticate the device based on the identification information, which may include registering the device to access the wireless network, e.g., using different credentials than those of the UE, by associating the device identification information with the credentials of the UE. Once registered, the device may communicate with the wireless network. The device subscription administration server may then establish access parameters and communicate them to the UE, which may transmit them to the device over communication link.

Claims

1. A method of wireless communication performed by a network server, comprising:

establishing a connection with a user equipment (UE) based on a network credential of the UE;

obtaining identification information from the UE for a device that lacks credentials for accessing a wireless network;

sending a message to a device authentication server;

authenticating the identification information for the device via the device authentication server;

registering the device for access to the wireless network with a network credential for the device that is different from the network credential of the UE after authenticating the identification information for the device, the registering comprising associating the identification information for the device with the network credential of the UE; and

receiving a request for access from the device, the request for access being independent of the UE subsequent to registering the device for access to the wireless network.

2. The method of claim 1, further comprising:

receiving a response from the device authentication server, wherein the authentication of the identification information is based on the response from the device authentication server.

3. The method of claim 1, wherein the network credential for the device comprises a shared key provisioned by a device manufacturer.

4. The method of claim 1, wherein the network credential for the device comprises a private-public key pair provisioned by a device manufacturer.

5. The method of claim 1, further comprising:

sending a device registration confirmation message to the UE upon registering the device.

6. The method of claim 1, wherein registering the device comprises:

sending registration information to a home subscriber server (HSS) of the UE to be added to a device subscription list stored at the HSS, wherein the registration information comprises the identification information and the network credential for the device.

7. The method of claim 1, wherein the identification information for the device comprises at least one of:

a device identifier, device parameters, a uniform resource locator (URL), a shared key, a public key, or a public key certificate of the device, or any combination thereof.

8. The method of claim 1, wherein registering the device comprises:

providing a network entity with access restrictions for the device.

9. The method of claim 8, wherein the access restrictions comprise at least one of:

access time duration limits, time of use specifications, maximum bandwidth limits, service parameters, uplink throughput limits, or downlink throughput limits, or any combination thereof.

10. The method of claim 1, further comprising:

receiving an authentication request for the device from the UE via the connection; and

sending an authentication acknowledgement for the device to the UE via the connection.

11. The method of claim 1, wherein the identification information for the device is of a different kind than the network credential of the UE.

12. The method of claim 1, wherein the network credential of the UE is provisioned by an operator of the wireless network and the identification information for the device is established by a manufacturer of the device.

13. The method of claim 1, wherein the identification information for the device comprises a global unique network identifier.

14. The method of claim 1, further comprising:

receiving a deregistration request for the device;

approving the deregistration request; and

removing access for the device based at least in part on approving the deregistration request.

15. A method of wireless communication performed by a user equipment (UE), comprising:

obtaining identification information for a device that lacks credentials for accessing a wireless network, wherein the device is a physical hardware device that is separate from the UE;

establishing a connection with the wireless network based on a network credential of the UE;

sending the identification information for the device to a network server over the connection to associate, at the network server, the identification information for the device with the network credential of the UE;

sending an authentication request for the device to the network server for authentication via a device authentication server; and

managing a subscription for the device on the wireless network, wherein wireless access for the device on the wireless network is established independently of the UE.

16. The method of claim 15, further comprising:

establishing a local communication link with the device, wherein the identification information for the device is obtained over the local communication link.

17. The method of claim 15, further comprising:

receiving an authentication response for the device from the network server via the connection.

18. The method of claim 15, wherein the wireless access parameters comprise a global unique network identifier.

19. The method of claim 15, further comprising:

sending a deregistration request for the device to the network server.

20. An apparatus for wireless communication, comprising:

means for establishing a connection with a user equipment (UE) based on a network credential of the UE;

means for obtaining identification information from the UE for a device that lacks credentials for accessing a wireless network, wherein the device is a physical hardware device that is separate from the UE;

means for sending a message to a device authentication server;

means for authenticating the identification information for the device via the device authentication server;

means for registering the device for access to the wireless network with a network credential for the device that is different from the network credential of the UE after authenticating the identification information for the device, the registering comprising associating the identification information for the device with the network credential of the UE; and

means for receiving a request for access from the device, the request for access being independent of the UE subsequent to registering the device for access to the wireless network.

21. The apparatus of claim 20, further comprising:

means for receiving a response from the device authentication server, wherein the means for authenticating are operative to authenticate the identification information based on the response from the device authentication server.

22. The apparatus of claim 20, wherein the network credential for the device comprises a shared key provisioned by a device manufacturer.

23. The apparatus of claim 20, wherein the network credential for the device comprises a private-public key pair provisioned by a device manufacturer.

24. The apparatus of claim 20, further comprising:

means for sending a device registration confirmation message to the UE upon registering the device.

25. The apparatus of claim 20, wherein means for registering the device comprises:

means for sending registration information to a home subscriber server (HSS) of the UE to be added to a device subscription list stored at the HSS, wherein the registration information comprises the identification information and the network credential for the device.

26. The apparatus of claim 20, wherein the identification information for the device comprises at least one of:

a device identifier, device parameters, a uniform resource locator (URL), a shared key, a public key, or a public key certificate of the device, or any combination thereof.

27. The apparatus of claim 20, wherein means for registering the device comprises:

means for providing a network entity with access restrictions for the device.

28. The apparatus of claim 27, wherein the access restrictions comprise at least one of:

access time duration limits, time of use specifications, maximum bandwidth limits, service parameters, uplink throughput limits, or downlink throughput limits, or any combination thereof.

29. The apparatus of claim 20, further comprising:

means for receiving an authentication request for the device from the UE via the connection; and

means for sending an authentication acknowledgement for the device to the UE via the connection.

30. The apparatus of claim 20, wherein the identification information for the device is of a different kind than the network credential of the UE.

31. The apparatus of claim 20, wherein the network credential of the UE is provisioned by an operator of the wireless network and the identification information for the device is established by a manufacturer of the device.

32. An apparatus for wireless communication, comprising:

means for obtaining identification information for a device that lacks credentials for accessing a wireless network, wherein the device is a physical hardware device that is separate from the apparatus;

means for establishing a connection with the wireless network based on a network credential of the apparatus;

means for sending the identification information to a network server over the connection to associate, at the network server, the identification information for the device with the network credential of the apparatus;

means for sending an authentication request for the device to the network server for authentication via a device authentication server; and

means for managing a subscription for the device on the wireless network, wherein wireless access for the device on the wireless network is established independently of the apparatus.

33. The apparatus of claim 32, further comprising:

means for establishing a local communication link with the device, wherein the means for obtaining are operative to obtain the identification information over the local communication link.

34. The apparatus of claim 32, further comprising:

means for receiving an authentication response for the device from the network server via the connection.

35. An apparatus for wireless communication, comprising:

at least one processor;

memory in electronic communication with the at least one processor; and

instructions stored in the memory and operable, when executed by the at least one processor to cause the apparatus to;

establish a connection with a user equipment (UE) based on a network credential of the UE;

obtain identification information from the UE for a device that lacks credentials for accessing a wireless network, wherein the device is a physical hardware device that is separate from the UE;

send a message to a device authentication server;

authenticate the identification information for the device via the device authentication server;

register the device for access to the wireless network with a network credential for the device that is different from the network credential of the UE after authenticating the identification information for the device, the registering comprising associating the identification information for the device with the network credential of the UE; and

receive a request for access from the device, the request for access being independent of the UE subsequent to registering the device for access to the wireless network.

36. The apparatus of claim 35, the instructions being operable to cause the apparatus to:

receive a response from the device authentication server, wherein the authentication of the identification information is based on the response from the device authentication server.

37. The apparatus of claim 35, wherein the network credential for the device comprises a shared key provisioned by a device manufacturer.

38. The apparatus of claim 35, wherein the network credential for the device comprises a private-public key pair provisioned by a device manufacturer.

39. The apparatus of claim 35, the instructions being operable to cause the apparatus to:

send a device registration confirmation message to the UE upon registering the device.

40. The apparatus of claim 35, the instructions being operable to cause the apparatus to:

send registration information to a home subscriber server (HSS) of the UE to be added to a device subscription list stored at the HSS, wherein the registration information comprises the identification information and the network credential for the device.

41. The apparatus of claim 35, wherein the identification information for the device comprises at least one of:

a device identifier, device parameters, a uniform resource locator (URL), a shared key, a public key, or a public key certificate of the device, or any combination thereof.

42. The apparatus of claim 35, the instructions being operable to cause the apparatus to:

provide a network entity with access restrictions for the device.

43. The apparatus of claim 42, wherein the access restrictions comprise at least one of:

access time duration limits, time of use specifications, maximum bandwidth limits, service parameters, uplink throughput limits, or downlink throughput limits, or any combination thereof.

44. The apparatus of claim 35, the instructions being operable to cause the apparatus to:

receive an authentication request for the device from the UE via the connection; and

send an authentication acknowledgement for the device to the UE via the connection.

45. The apparatus of claim 35, wherein the identification information for the device is of a different kind than the network credential of the UE.

46. The apparatus of claim 35, wherein the network credential of the UE is provisioned by an operator of the wireless network and the identification information for the device is established by a manufacturer of the device.

47. The apparatus of claim 35, wherein the identification information for the device comprises a global unique network identifier.

48. The apparatus of claim 35, the instructions being operable to cause the apparatus to:

receive a deregistration request for the device;

approve the deregistration request; and

remove access for the device based at least in part on approving the deregistration request.

49. An apparatus for wireless communication, comprising:

at least one processor;

memory in electronic communication with the at least one processor; and

instructions stored in the memory and operable, when executed by the at least one processor, to cause the apparatus to;

obtain identification information for a device that lacks credentials for accessing a wireless network, wherein the device is a physical hardware device that is separate from the UE;

establish a connection with the wireless network based on a network credential of the apparatus;

send the identification information to a network server over the connection to associate, at the network server, the identification information for the device with the network credential of the apparatus;

send an authentication request for the device to the network server for authentication via a device authentication server; and

manage a subscription for the device on the wireless network, wherein wireless access for the device on the wireless network is established independently of the apparatus.

50. The apparatus of claim 49, the instructions being operable to cause the apparatus to:

establish a local communication link with the device, wherein the identification information for the device is obtained over the local communication link.

51. The apparatus of claim 49, the instructions being operable to cause the apparatus to:

receive an authentication response for the device from the network server via the connection.

52. The apparatus of claim 49, wherein the wireless access parameters comprise a global unique network identifier.

53. The apparatus of claim 49, the instructions being operable to cause the apparatus to:

send a deregistration request for the device to the network server.

54. A non-transitory computer-readable medium storing code for wireless communication, the code comprising instructions executable to:

establish a connection with a user equipment (UE) based on a network credential of the UE;

obtain identification information from the UE for a device that lacks credentials for accessing a wireless network, wherein the device is a physical hardware device that is separate from the UE;

send a message to a device authentication server;

authenticate the identification information for the device via the device authentication server;

register the device for access to the wireless network with a network credential for the device that is different from the network credential of the UE after authenticating the identification information for the device, the registering comprising associating the identification information for the device with the network credential of the UE; and

receive a request for access from the device, the request for access being independent of the UE subsequent to registering the device for access to the wireless network.

55. A non-transitory computer-readable medium storing code for wireless communication, the code comprising instructions executable to:

obtain identification information for a device that lacks credentials for accessing a wireless network;

establish a connection with the wireless network based on a network credential of a user equipment (UE), wherein the device is a physical hardware device that is separate from the UE;

send the identification information to a network server over the connection to associate, at the network server, the identification information for the device with the network credential of the UE;

send an authentication request for the device to the network server for authentication via a device authentication server; and

managing a subscription for the device on the wireless network, wherein wireless access for the device on the wireless network is established independently of the UE.